Vulnerability-Lookup

RHSA-2023:5622

Vulnerability from csaf_opensuse - Published: 2023-10-10 00:00 - Updated: 2026-09-20 11:31

Summary

security update for kernel

Severity

Low

Notes

Title of the patch: security update for kernel

Description of the patch: This security update provides a functional equivalent of RHSA-2023:5622. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2023:5622.

Patchnames: RHSA-2023:5622

CVE-2023-32233

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 13 products

Product	Version	Remediation
Unresolved product id: SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.102.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-0:3.10.0-1160.102.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.102.1.el7.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.102.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.102.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.102.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.102.1.el7.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.102.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.102.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.102.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.102.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:perf-0:3.10.0-1160.102.1.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.102.1.el7.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2023-35001

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 13 products, the same list as for CVE-2023-32233

Threats

Impact important

CVE-2023-3609

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 13 products, the same list as for CVE-2023-32233

Threats

Impact important

References

17 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/r…	self
https://www.suse.com/security/cve/CVE-2023-32233/	self
https://www.suse.com/security/cve/CVE-2023-35001/	self
https://www.suse.com/security/cve/CVE-2023-3609/	self
https://www.suse.com/security/cve/CVE-2023-32233	external
https://bugzilla.suse.com/1211043	external
https://bugzilla.suse.com/1211187	external
https://www.suse.com/security/cve/CVE-2023-35001	external
https://bugzilla.suse.com/1213059	external
https://bugzilla.suse.com/1213063	external
https://bugzilla.suse.com/1217531	external
https://www.suse.com/security/cve/CVE-2023-3609	external
https://bugzilla.suse.com/1213586	external
https://bugzilla.suse.com/1213587	external
https://bugzilla.suse.com/1217444	external
https://bugzilla.suse.com/1217531	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Low"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2023:5622.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2023:5622.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2023:5622",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2023_5622.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-32233 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-32233/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-35001 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-35001/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-3609 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-3609/"
      }
    ],
    "title": "security update for kernel",
    "tracking": {
      "current_release_date": "2026-09-20T11:31:34Z",
      "generator": {
        "date": "2023-10-10T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2023:5622",
      "initial_release_date": "2023-10-10T00:00:00Z",
      "revision_history": [
        {
          "date": "2023-10-10T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T11:31:34Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-abi-whitelists-0:3.10.0-1160.102.1.el7.noarch",
                "product": {
                  "name": "kernel-abi-whitelists-0:3.10.0-1160.102.1.el7.noarch",
                  "product_id": "kernel-abi-whitelists-0:3.10.0-1160.102.1.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-abi-whitelists@3.10.0-1160.102.1.el7?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-doc-0:3.10.0-1160.102.1.el7.noarch",
                "product": {
                  "name": "kernel-doc-0:3.10.0-1160.102.1.el7.noarch",
                  "product_id": "kernel-doc-0:3.10.0-1160.102.1.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-doc@3.10.0-1160.102.1.el7?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftool-0:3.10.0-1160.102.1.el7.x86_64",
                "product": {
                  "name": "bpftool-0:3.10.0-1160.102.1.el7.x86_64",
                  "product_id": "bpftool-0:3.10.0-1160.102.1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/bpftool@3.10.0-1160.102.1.el7?arch=x86_64\u0026upstream=bpftool-0:3.10.0-1160.102.1.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-0:3.10.0-1160.102.1.el7.x86_64",
                "product": {
                  "name": "kernel-0:3.10.0-1160.102.1.el7.x86_64",
                  "product_id": "kernel-0:3.10.0-1160.102.1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel@3.10.0-1160.102.1.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-0:3.10.0-1160.102.1.el7.x86_64",
                "product": {
                  "name": "kernel-debug-0:3.10.0-1160.102.1.el7.x86_64",
                  "product_id": "kernel-debug-0:3.10.0-1160.102.1.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-debug@3.10.0-1160.102.1.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-1160.102.1.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-0:3.10.0-1160.102.1.el7.x86_64",
                "product": {
                  "name": "kernel-debug-devel-0:3.10.0-1160.102.1.el7.x86_64",
                  "product_id": "kernel-debug-devel-0:3.10.0-1160.102.1.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-debug-devel@3.10.0-1160.102.1.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-1160.102.1.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-devel-0:3.10.0-1160.102.1.el7.x86_64",
                "product": {
                  "name": "kernel-devel-0:3.10.0-1160.102.1.el7.x86_64",
                  "product_id": "kernel-devel-0:3.10.0-1160.102.1.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-devel@3.10.0-1160.102.1.el7?arch=x86_64\u0026upstream=kernel-source-0:3.10.0-1160.102.1.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-headers-0:3.10.0-1160.102.1.el7.x86_64",
                "product": {
                  "name": "kernel-headers-0:3.10.0-1160.102.1.el7.x86_64",
                  "product_id": "kernel-headers-0:3.10.0-1160.102.1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-headers@3.10.0-1160.102.1.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-0:3.10.0-1160.102.1.el7.x86_64",
                "product": {
                  "name": "kernel-tools-0:3.10.0-1160.102.1.el7.x86_64",
                  "product_id": "kernel-tools-0:3.10.0-1160.102.1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools@3.10.0-1160.102.1.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-libs-0:3.10.0-1160.102.1.el7.x86_64",
                "product": {
                  "name": "kernel-tools-libs-0:3.10.0-1160.102.1.el7.x86_64",
                  "product_id": "kernel-tools-libs-0:3.10.0-1160.102.1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools-libs@3.10.0-1160.102.1.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-libs-devel-0:3.10.0-1160.102.1.el7.x86_64",
                "product": {
                  "name": "kernel-tools-libs-devel-0:3.10.0-1160.102.1.el7.x86_64",
                  "product_id": "kernel-tools-libs-devel-0:3.10.0-1160.102.1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools-libs-devel@3.10.0-1160.102.1.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perf-0:3.10.0-1160.102.1.el7.x86_64",
                "product": {
                  "name": "perf-0:3.10.0-1160.102.1.el7.x86_64",
                  "product_id": "perf-0:3.10.0-1160.102.1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/perf@3.10.0-1160.102.1.el7?arch=x86_64\u0026upstream=perf-0:3.10.0-1160.102.1.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-perf-0:3.10.0-1160.102.1.el7.x86_64",
                "product": {
                  "name": "python-perf-0:3.10.0-1160.102.1.el7.x86_64",
                  "product_id": "python-perf-0:3.10.0-1160.102.1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/python-perf@3.10.0-1160.102.1.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 7",
                "product": {
                  "name": "SUSE Liberty Linux 7",
                  "product_id": "SUSE Liberty Linux 7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftool-0:3.10.0-1160.102.1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.102.1.el7.x86_64"
        },
        "product_reference": "bpftool-0:3.10.0-1160.102.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:3.10.0-1160.102.1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.102.1.el7.x86_64"
        },
        "product_reference": "kernel-0:3.10.0-1160.102.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-abi-whitelists-0:3.10.0-1160.102.1.el7.noarch as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.102.1.el7.noarch"
        },
        "product_reference": "kernel-abi-whitelists-0:3.10.0-1160.102.1.el7.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-0:3.10.0-1160.102.1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.102.1.el7.x86_64"
        },
        "product_reference": "kernel-debug-0:3.10.0-1160.102.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-0:3.10.0-1160.102.1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.102.1.el7.x86_64"
        },
        "product_reference": "kernel-debug-devel-0:3.10.0-1160.102.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-0:3.10.0-1160.102.1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.102.1.el7.x86_64"
        },
        "product_reference": "kernel-devel-0:3.10.0-1160.102.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-doc-0:3.10.0-1160.102.1.el7.noarch as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.102.1.el7.noarch"
        },
        "product_reference": "kernel-doc-0:3.10.0-1160.102.1.el7.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-headers-0:3.10.0-1160.102.1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.102.1.el7.x86_64"
        },
        "product_reference": "kernel-headers-0:3.10.0-1160.102.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-0:3.10.0-1160.102.1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.102.1.el7.x86_64"
        },
        "product_reference": "kernel-tools-0:3.10.0-1160.102.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-libs-0:3.10.0-1160.102.1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.102.1.el7.x86_64"
        },
        "product_reference": "kernel-tools-libs-0:3.10.0-1160.102.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-libs-devel-0:3.10.0-1160.102.1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.102.1.el7.x86_64"
        },
        "product_reference": "kernel-tools-libs-devel-0:3.10.0-1160.102.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perf-0:3.10.0-1160.102.1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:perf-0:3.10.0-1160.102.1.el7.x86_64"
        },
        "product_reference": "perf-0:3.10.0-1160.102.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-perf-0:3.10.0-1160.102.1.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.102.1.el7.x86_64"
        },
        "product_reference": "python-perf-0:3.10.0-1160.102.1.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-32233",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-32233"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.102.1.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.102.1.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.102.1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-32233",
          "url": "https://www.suse.com/security/cve/CVE-2023-32233"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1211043 for CVE-2023-32233",
          "url": "https://bugzilla.suse.com/1211043"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1211187 for CVE-2023-32233",
          "url": "https://bugzilla.suse.com/1211187"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.102.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.102.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.102.1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.102.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.102.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.102.1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-10-10T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-32233"
    },
    {
      "cve": "CVE-2023-35001",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-35001"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.102.1.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.102.1.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.102.1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-35001",
          "url": "https://www.suse.com/security/cve/CVE-2023-35001"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1213059 for CVE-2023-35001",
          "url": "https://bugzilla.suse.com/1213059"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1213063 for CVE-2023-35001",
          "url": "https://bugzilla.suse.com/1213063"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1217531 for CVE-2023-35001",
          "url": "https://bugzilla.suse.com/1217531"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.102.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.102.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.102.1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.102.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.102.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.102.1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-10-10T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-35001"
    },
    {
      "cve": "CVE-2023-3609",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-3609"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free vulnerability in the Linux kernel\u0027s net/sched: cls_u32 component can be exploited to achieve local privilege escalation.\n\n\n\nIf tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.\n\n\n\nWe recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.102.1.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.102.1.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-1160.102.1.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.102.1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-3609",
          "url": "https://www.suse.com/security/cve/CVE-2023-3609"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1213586 for CVE-2023-3609",
          "url": "https://bugzilla.suse.com/1213586"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1213587 for CVE-2023-3609",
          "url": "https://bugzilla.suse.com/1213587"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1217444 for CVE-2023-3609",
          "url": "https://bugzilla.suse.com/1217444"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1217531 for CVE-2023-3609",
          "url": "https://bugzilla.suse.com/1217531"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.102.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.102.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.102.1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-1160.102.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-1160.102.1.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-1160.102.1.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-1160.102.1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-10-10T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-3609"
    }
  ]
}

CVE-2023-32233 (GCVE-0-2023-32233)

Vulnerability from cvelistv5 – Published: 2023-05-08 00:00 – Updated: 2025-05-05 15:58

Summary

In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-04-23 13:28 UTC

CWE

n/a
CWE-416 - Use After Free

Assigner

mitre mitre root

References

11 references

URL	Tags
https://www.openwall.com/lists/oss-security/2023/…
https://github.com/torvalds/linux/commit/c1592a89…
https://git.kernel.org/cgit/linux/kernel/git/torv…
https://news.ycombinator.com/item?id=35879660
https://bugzilla.redhat.com/show_bug.cgi?id=2196105
https://www.debian.org/security/2023/dsa-5402	vendor-advisory
http://www.openwall.com/lists/oss-security/2023/05/15/5	mailing-list
https://lists.debian.org/debian-lts-announce/2023…	mailing-list
https://security.netapp.com/advisory/ntap-2023061…
http://packetstormsecurity.com/files/173087/Kerne…
https://lists.debian.org/debian-lts-announce/2023…	mailing-list

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T15:10:23.978Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.openwall.com/lists/oss-security/2023/05/08/4"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1592a89942e9678f7d9c8030efa777c0d57edab"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://news.ycombinator.com/item?id=35879660"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2196105"
          },
          {
            "name": "DSA-5402",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5402"
          },
          {
            "name": "[oss-security] 20230515 Re: [CVE-2023-32233] Linux kernel use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary reads and writes in kernel memory",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/05/15/5"
          },
          {
            "name": "[debian-lts-announce] 20230605 [SECURITY] [DLA 3446-1] linux-5.10 security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20230616-0002/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html"
          },
          {
            "name": "[debian-lts-announce] 20230727 [SECURITY] [DLA 3508-1] linux security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-32233",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T13:28:27.494776Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-05T15:58:00.672Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-07-27T00:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.openwall.com/lists/oss-security/2023/05/08/4"
        },
        {
          "url": "https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab"
        },
        {
          "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1592a89942e9678f7d9c8030efa777c0d57edab"
        },
        {
          "url": "https://news.ycombinator.com/item?id=35879660"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2196105"
        },
        {
          "name": "DSA-5402",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2023/dsa-5402"
        },
        {
          "name": "[oss-security] 20230515 Re: [CVE-2023-32233] Linux kernel use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary reads and writes in kernel memory",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2023/05/15/5"
        },
        {
          "name": "[debian-lts-announce] 20230605 [SECURITY] [DLA 3446-1] linux-5.10 security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20230616-0002/"
        },
        {
          "url": "http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html"
        },
        {
          "name": "[debian-lts-announce] 20230727 [SECURITY] [DLA 3508-1] linux security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2023-32233",
    "datePublished": "2023-05-08T00:00:00.000Z",
    "dateReserved": "2023-05-05T00:00:00.000Z",
    "dateUpdated": "2025-05-05T15:58:00.672Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-35001 (GCVE-0-2023-35001)

Vulnerability from cvelistv5 – Published: 2023-07-05 18:35 – Updated: 2025-02-13 16:55

Title

Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability

Summary

Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-787

Assigner

canonical mitre root

References

11 references

URL	Tags
https://lore.kernel.org/netfilter-devel/202307051…	issue-tracking
https://www.openwall.com/lists/oss-security/2023/…	mailing-list
http://www.openwall.com/lists/oss-security/2023/07/05/3
https://www.debian.org/security/2023/dsa-5453
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
http://packetstormsecurity.com/files/173757/Kerne…
https://lists.debian.org/debian-lts-announce/2023…
https://security.netapp.com/advisory/ntap-2023082…
http://packetstormsecurity.com/files/174577/Kerne…
https://lists.debian.org/debian-lts-announce/2024…

Impacted products

1 product

Vendor	Product	Version
Linux	Linux Kernel	Affected: v3.13-rc1

Date Public

2023-07-05 12:15

Credits

Tanguy Dubroca

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T16:17:04.253Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "issue-tracking",
              "x_transferred"
            ],
            "url": "https://lore.kernel.org/netfilter-devel/20230705121515.747251-1-cascardo@canonical.com/T/"
          },
          {
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://www.openwall.com/lists/oss-security/2023/07/05/3"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/07/05/3"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5453"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UPHI46ROSSLVAV4R5LJWJYU747JGOS6D/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGZC5XOANA75OJ4XARBBXYSLDKUIJI5E/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20230824-0007/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "Linux"
          ],
          "product": "Linux Kernel",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "v3.13-rc1"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Tanguy Dubroca"
        }
      ],
      "datePublic": "2023-07-05T12:15:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-11T19:07:23.291Z",
        "orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
        "shortName": "canonical"
      },
      "references": [
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://lore.kernel.org/netfilter-devel/20230705121515.747251-1-cascardo@canonical.com/T/"
        },
        {
          "tags": [
            "mailing-list"
          ],
          "url": "https://www.openwall.com/lists/oss-security/2023/07/05/3"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/07/05/3"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5453"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UPHI46ROSSLVAV4R5LJWJYU747JGOS6D/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGZC5XOANA75OJ4XARBBXYSLDKUIJI5E/"
        },
        {
          "url": "http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.html"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20230824-0007/"
        },
        {
          "url": "http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.html"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html"
        }
      ],
      "title": "Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
    "assignerShortName": "canonical",
    "cveId": "CVE-2023-35001",
    "datePublished": "2023-07-05T18:35:17.785Z",
    "dateReserved": "2023-06-29T21:43:35.036Z",
    "dateUpdated": "2025-02-13T16:55:43.429Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-3609 (GCVE-0-2023-3609)

Vulnerability from cvelistv5 – Published: 2023-07-21 20:47 – Updated: 2026-07-30 16:34

Title

Use-after-free in Linux kernel's net/sched: cls_u32 component

Summary

A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-03-05 18:36 UTC

CWE

CWE-416 - Use After Free

Assigner

Google Google root

References

8 references

URL	Tags
https://git.kernel.org/pub/scm/linux/kernel/git/t…	patch
https://kernel.dance/04c55383fa5689357bcdd2c80367…
https://security.netapp.com/advisory/ntap-2023081…
https://www.debian.org/security/2023/dsa-5480
http://packetstormsecurity.com/files/175072/Kerne…
https://lists.debian.org/debian-lts-announce/2023…
http://packetstormsecurity.com/files/175963/Kerne…
https://lists.debian.org/debian-lts-announce/2024…

Impacted products

1 product

Vendor	Product	Version
Linux	Kernel	Affected: 4.14.0 , < 4.14.322 (semver) Affected: 4.15.0 , < 4.19.291 (semver) Affected: 4.20.0 , < 5.4.248 (semver) Affected: 5.5.0 , < 5.10.185 (semver) Affected: 5.11.0 , < 5.15.118 (semver) Affected: 5.16.0 , < 6.1.35 (semver) Affected: 6.2.0 , < 6.3.9 (semver) Unaffected: 6.4.0 (semver) Unaffected: 04c55383fa5689357bcdd2c8036725a55ed632bc (git) cpe:2.3:o:linux:linux_kernel::::::::

Date Public

2023-06-09 10:40

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:01:56.672Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "patch",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=04c55383fa5689357bcdd2c8036725a55ed632bc"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://kernel.dance/04c55383fa5689357bcdd2c8036725a55ed632bc"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20230818-0005/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5480"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-3609",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-05T18:36:26.184616Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-05T18:48:12.763Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "packageName": "kernel",
          "platforms": [
            "Linux"
          ],
          "product": "Kernel",
          "repo": "https://git.kernel.org",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "4.14.322",
              "status": "affected",
              "version": "4.14.0",
              "versionType": "semver"
            },
            {
              "lessThan": "4.19.291",
              "status": "affected",
              "version": "4.15.0",
              "versionType": "semver"
            },
            {
              "lessThan": "5.4.248",
              "status": "affected",
              "version": "4.20.0",
              "versionType": "semver"
            },
            {
              "lessThan": "5.10.185",
              "status": "affected",
              "version": "5.5.0",
              "versionType": "semver"
            },
            {
              "lessThan": "5.15.118",
              "status": "affected",
              "version": "5.11.0",
              "versionType": "semver"
            },
            {
              "lessThan": "6.1.35",
              "status": "affected",
              "version": "5.16.0",
              "versionType": "semver"
            },
            {
              "lessThan": "6.3.9",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "6.4.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "04c55383fa5689357bcdd2c8036725a55ed632bc",
              "versionType": "git"
            }
          ]
        }
      ],
      "datePublic": "2023-06-09T10:40:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA use-after-free vulnerability in the Linux kernel\u0027s net/sched: cls_u32 component can be exploited to achieve local privilege escalation.\u003c/p\u003e\u003cp\u003eIf tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.\u003c/p\u003e\u003cp\u003eWe recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.\u003c/p\u003e"
            }
          ],
          "value": "A use-after-free vulnerability in the Linux kernel\u0027s net/sched: cls_u32 component can be exploited to achieve local privilege escalation.\n\n\n\nIf tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.\n\n\n\nWe recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233 Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416 Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-30T16:34:52.372Z",
        "orgId": "14ed7db2-1595-443d-9d34-6215bf890778",
        "shortName": "Google"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=04c55383fa5689357bcdd2c8036725a55ed632bc"
        },
        {
          "url": "https://kernel.dance/04c55383fa5689357bcdd2c8036725a55ed632bc"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20230818-0005/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5480"
        },
        {
          "url": "http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html"
        },
        {
          "url": "http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Use-after-free in Linux kernel\u0027s net/sched: cls_u32 component",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "14ed7db2-1595-443d-9d34-6215bf890778",
    "assignerShortName": "Google",
    "cveId": "CVE-2023-3609",
    "datePublished": "2023-07-21T20:47:12.172Z",
    "dateReserved": "2023-07-10T20:52:53.660Z",
    "dateUpdated": "2026-07-30T16:34:52.372Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2023:5622

CVE-2023-32233 (GCVE-0-2023-32233)

CVE-2023-35001 (GCVE-0-2023-35001)

CVE-2023-3609 (GCVE-0-2023-3609)

Tags

Sightings

Nomenclature

Related by attack behaviour